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A method of recovering from a compromise of a root key which is the private key of a 
first public key-private key pair, the method including the steps of electronically sending 
out an emergency message (10) indicating that the root key has been compromised 
and also containing a replacement key (16) and a digital signature (22) which was 
generated by using the root key; and publishing in an out-of-band channel a value V, 
wherein V is derived from the emergency message. 
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